为手写风格设计防护机制,防止他人模仿伪造签名
InkShield: Writing Style Protection Against Unauthorized Handwriting Mimicry

- 用替身作者定义风格偏移方向,在笔画边缘加扰动
- 使生成文本难以被识别为目标作者,准确率降至2.03%
- 保护后手写稿仍清晰可读,适合隐私敏感场景
近期的手写文本生成模型可从公开参考样本中复现作者风格,带来文件伪造与身份滥用风险。攻击者可能利用公开手写笔记或签名生成伪造推荐信或授权文件,引发欺诈与误判。现有针对图像编辑或合成的防护方法在手写风格复制场景下效果不佳:它们通常对整幅图像进行全局扰动,而在稀疏手写图像中,这类扰动在空白区域十分明显,严重降低视觉质量。为此,本文提出 InkShield,一种主动式手写风格防御方案,可在参考图像发布前进行保护。InkShield 选取一个替身作者定义风格偏移方向,使用冻结的手写生成代理模型优化扰动,并将扰动限制在笔画边缘以避免背景异常。在 IAM 数据集上,经两位独立评估者检测,生成样本被误认为目标作者的 Top-1/Top-5 率从 11.94%/36.52% 降至 2.03%/8.79%。同时,保护后的参考图像与原图视觉差异极小(LPIPS 0.0078),生成文本仍保持可读性。InkShield 还具备跨生成器迁移能力。整体上,该方法有效应对未经授权的手写风格模仿威胁。
原文摘要 · Abstract (English)
Recent handwritten text generators can reproduce a writer's style from publicly available references, posing risks of document forgery and identity misuse. An attacker may use a publicly available handwritten note or signature sample to generate forged recommendation letters or authorization forms, leading to document fraud, identity misuse, and misleading decisions. However, existing protections against unauthorized image editing or synthesis transfer poorly to handwriting style mimicry. Designed for natural images with complex backgrounds, they often optimize perturbations over the whole image. For sparse handwriting images, such global perturbations become conspicuous in blank background regions and largely degrade the visual quality. In this work, we propose InkShield, a proactive writing-style defense that protects reference images before release. InkShield selects a decoy writer to define a style-displacement direction, optimizes perturbations with a frozen handwriting-generation surrogate, and confines them to ink-stroke edges to avoid conspicuous background artifacts. On IAM, the average Top-1/Top-5 rates at which generated samples are retrieved as the target writer by two independent writer evaluators decrease from 11.94%/36.52% to 2.03%/8.79%. Meanwhile, the protected references remain visually close to the originals (LPIPS 0.0078), and the generated text remains readable. InkShield also exhibits transferability to other handwriting generators. Overall, InkShield provides practical protection against unauthorized handwriting style mimicry.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。